$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72e2acac-d039-3a18-b46f-9f629613e69f.roa File: 72e2acac-d039-3a18-b46f-9f629613e69f.roa (raw, json) Hash identifier: 0riWO2C1JcIUL6fvKZrSePf+DhUOLXwog2hvbRMoOUo= Subject key identifier: 61:D3:A7:69:09:69:DE:13:41:49:74:9C:03:FB:F5:6C:20:43:F1:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858455333033D562FAC1088860520 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72e2acac-d039-3a18-b46f-9f629613e69f.roa Signing time: Mon 25 Mar 2024 13:00:33 +0000 ROA not before: Mon 25 Mar 2024 13:00:33 +0000 ROA not after: Sun 23 Jun 2024 13:00:33 +0000 asID: 7029 IP address blocks: 98.20.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:53:33:03:3d:56:2f:ac:10:88:86:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 25 13:00:33 2024 GMT Not After : Jun 23 13:00:33 2024 GMT Subject: CN=3d7d99aa-a61c-4a00-844c-6adc153a2f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:06:47:5b:d3:56:77:5b:3b:92:35:3e:72: 32:b2:e6:09:6e:50:f1:ef:37:bd:cd:14:ba:90:bc: 3d:a5:dc:ee:ab:6a:0b:38:2f:70:7f:7f:bc:a7:0a: 5b:29:eb:3a:11:11:36:5a:f6:fc:9e:c8:26:ae:27: bb:58:22:ba:4a:88:ce:0a:21:04:56:88:a8:5e:dd: 83:cf:59:a7:c5:b2:da:a4:03:00:a6:4f:2e:e3:f1: e8:5c:71:72:38:b4:e7:dd:5e:5b:27:f2:ea:c7:0e: c9:e3:60:4e:a3:ba:2c:31:cf:5b:73:ed:70:e1:48: bc:85:4e:46:26:29:4a:21:25:75:d3:b6:86:da:19: 7b:08:c7:b5:3e:91:f7:9e:f9:5d:ee:93:43:3a:32: ab:67:ae:d2:08:06:0c:25:e7:0c:35:15:80:3a:ee: 17:a9:1b:12:8e:06:92:ef:66:e8:9d:dd:12:f3:1e: ad:0e:48:5c:69:99:f3:d8:44:c5:b6:55:96:98:4a: b6:03:15:51:f3:f9:8e:79:86:d1:c3:3b:cb:18:39: 2c:e6:d6:25:67:c3:b8:bf:f0:a5:54:c6:8c:7b:75: fc:34:ae:28:1e:a2:78:ce:b5:15:c1:b6:6f:14:a9: 49:3f:f6:bf:db:21:93:c4:7f:33:ad:4a:83:16:01: 1f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:A7:69:09:69:DE:13:41:49:74:9C:03:FB:F5:6C:20:43:F1:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/72e2acac-d039-3a18-b46f-9f629613e69f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:48:7b:59:9c:7f:54:e3:96:34:a7:14:a5:51:71:08:57:b8: ee:4b:30:73:c9:a1:ca:4d:37:2b:c2:5c:40:54:4d:d3:74:3b: 36:b4:89:d3:bf:88:29:d9:a2:ee:0c:94:6b:15:a8:13:16:9b: 46:a8:2a:c6:27:1e:20:7c:5b:24:6d:5d:78:83:93:af:29:ae: ae:e9:d2:53:62:c4:ce:f5:86:de:94:0c:c9:43:98:c7:3e:5f: ac:da:8d:85:dd:8b:03:23:4c:9a:99:60:e7:fa:33:d0:e2:35: c7:11:bb:ca:9c:f3:13:a6:17:b1:6e:a6:18:fe:8d:86:22:b5: 94:1a:0f:18:23:c4:09:89:78:49:a3:34:c1:07:44:a9:e4:7c: a8:5d:ac:e1:09:f5:ce:89:98:8b:fa:18:a6:57:6d:68:2a:98: d0:b0:09:ba:36:c2:84:3a:8b:8e:03:be:f1:e4:fb:55:ed:db: 3c:b3:31:c9:e6:de:99:07:76:2d:4a:fd:ef:34:55:d1:9a:e4: bf:47:09:2e:94:10:4f:9a:21:c5:af:34:78:8f:e2:a9:3c:d7: 0a:8e:fc:5b:7f:21:67:7f:f0:7e:94:ed:fa:d0:2d:f8:52:b2: 00:c1:6d:1c:ea:82:f5:9e:b2:47:1b:0d:5b:58:dc:f6:36:5c: da:ed:2c:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMwM9Vi+sEIiGBSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk M2Q3ZDk5YWEtYTYxYy00YTAwLTg0NGMtNmFkYzE1M2EyZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwegGR1vTVndbO5I1PnIysuYJblDx7ze9zRS6 kLw9pdzuq2oLOC9wf3+8pwpbKes6ERE2Wvb8nsgmrie7WCK6SojOCiEEVoioXt2D z1mnxbLapAMApk8u4/HoXHFyOLTn3V5bJ/Lqxw7J42BOo7osMc9bc+1w4Ui8hU5G JilKISV107aG2hl7CMe1PpH3nvld7pNDOjKrZ67SCAYMJecMNRWAOu4XqRsSjgaS 72bond0S8x6tDkhcaZnz2ETFtlWWmEq2AxVR8/mOeYbRwzvLGDks5tYlZ8O4v/Cl VMaMe3X8NK4oHqJ4zrUVwbZvFKlJP/a/2yGTxH8zrUqDFgEflQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHTp2kJad4TQUl0nAP79WwgQ/ElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzJlMmFjYWMtZDAzOS0z YTE4LWI0NmYtOWY2Mjk2MTNlNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1Ie1mcf1TjljSnFKVRcQhXuO5LMHPJocpNNyvCXEBUTdN0Oza0idO/ iCnZou4MlGsVqBMWm0aoKsYnHiB8WyRtXXiDk68prq7p0lNixM71ht6UDMlDmMc+ X6zajYXdiwMjTJqZYOf6M9DiNccRu8qc8xOmF7Fuphj+jYYitZQaDxgjxAmJeEmj NMEHRKnkfKhdrOEJ9c6JmIv6GKZXbWgqmNCwCbo2woQ6i44DvvHk+1Xt2zyzMcnm 3pkHdi1K/e80VdGa5L9HCS6UEE+aIcWvNHiP4qk81wqO/Ft/IWd/8H6U7frQLfhS sgDBbRzqgvWeskcbDVtY3PY2XNrtLJU= -----END CERTIFICATE-----Generated at Thu May 23 01:44:15 2024 by rpki-client on console-fra.rpki-client.org